$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28556.roa File: AS28556.roa (raw, json) Hash identifier: PJxg46F8KRGr5IltCWYaV+m7BUxFd3JDuchaJmQcW+o= Subject key identifier: 59:66:EA:9E:F4:D7:4A:DD:B4:B6:B5:66:39:08:4F:C7:76:49:9B:FD Certificate issuer: /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A Certificate serial: 0CACDF542605052589EFF38CF266EB6B2A47908B Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28556.roa Signing time: Wed 20 May 2026 05:20:00 +0000 ROA not before: Wed 20 May 2026 05:15:00 +0000 ROA not after: Wed 19 May 2027 05:20:00 +0000 asID: 28556 IP address blocks: 187.185.154.0/24 maxlen: 24 189.220.60.0/24 maxlen: 24 189.221.153.0/24 maxlen: 24 2806:250:16::/48 maxlen: 48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 May 2026 07:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ac:df:54:26:05:05:25:89:ef:f3:8c:f2:66:eb:6b:2a:47:90:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A Validity Not Before: May 20 05:15:00 2026 GMT Not After : May 19 05:20:00 2027 GMT Subject: CN=5966EA9EF4D74ADDB4B6B56639084FC776499BFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e7:8d:6c:55:65:a2:ef:c7:bb:dc:73:74:59: 4c:a9:7d:08:1f:ea:35:23:ea:d8:13:ac:8c:53:f6: 1b:4b:27:65:99:70:5d:ba:9e:a7:40:0e:b8:87:9b: f0:b0:f3:a6:a8:fe:d2:05:72:95:e2:5a:67:c7:eb: 91:0d:ea:be:70:c6:86:a9:95:c5:49:05:f8:90:04: d3:b6:33:90:ab:e3:bf:95:55:31:b4:5c:5c:dc:35: 7b:e8:d1:4f:34:31:d0:50:8c:6f:bb:3d:43:7d:b5: 5b:36:97:86:b4:3c:91:2e:b6:20:64:68:ed:cb:aa: 71:ed:7c:6e:59:ff:98:0d:1a:b9:f7:e1:a1:4e:84: 2a:ca:01:17:c0:95:c5:51:1f:3b:01:09:3c:d5:ff: 5a:6d:aa:b3:6c:ad:de:1d:72:2a:41:3c:cf:5e:2b: f1:22:88:0a:fb:18:f2:55:c9:d4:ae:0f:bf:c1:2f: 67:d7:15:54:6c:7a:8b:bd:f9:5d:06:8d:91:c2:34: f4:96:ce:f2:61:0f:22:8d:71:54:09:9b:cd:f3:24: 97:47:a1:e0:e2:57:b0:1f:42:fd:7a:55:dc:3b:3d: 7b:24:46:54:00:86:de:a5:42:4a:ea:70:0e:47:1c: c2:94:8b:7a:cd:77:db:d0:84:49:ba:1b:80:ed:ab: 6a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:66:EA:9E:F4:D7:4A:DD:B4:B6:B5:66:39:08:4F:C7:76:49:9B:FD X509v3 Authority Key Identifier: keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/AS28556.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.185.154.0/24 189.220.60.0/24 189.221.153.0/24 IPv6: 2806:250:16::/48 Signature Algorithm: sha256WithRSAEncryption 6c:3a:2a:56:1e:ec:15:ea:8c:23:d6:c4:52:0f:64:da:06:b3: 7f:2a:6b:66:66:e1:96:7c:9b:b4:b1:67:13:ab:46:2a:c0:e1: a2:c0:2c:17:7b:de:4b:91:e7:37:75:74:63:8b:ec:80:e9:dd: bc:37:f4:ca:95:a3:50:0f:0e:95:ef:eb:97:65:d0:9f:0c:40: 11:1d:5b:d0:32:5e:42:e8:58:fd:01:4c:23:38:39:c3:7c:75: bf:0d:3a:a1:3f:72:d3:81:01:73:89:e1:bf:15:e4:98:0c:77: 5c:10:d7:2d:d9:4f:1c:ee:e2:47:dc:93:a3:de:ba:b3:93:b2: 90:b8:3c:d2:9b:a7:10:c4:e3:4b:63:4b:2d:b1:14:f6:86:c0: f2:c1:bd:ee:bf:53:78:c2:04:40:6c:b7:97:c7:16:28:a3:27: 40:db:8b:9e:ed:60:60:97:f6:13:b6:71:6f:1a:e8:60:ca:2e: 6d:9f:c5:c4:b9:c6:0f:e0:09:56:18:7f:ba:87:60:b6:44:71: b4:e5:7c:9b:6d:ed:fe:96:14:fe:58:70:71:d7:c3:1a:f5:d9: 0d:55:50:7b:39:5d:e9:9a:69:63:1b:2f:fe:22:9d:99:7f:87: a7:8e:16:1f:cf:38:59:5e:30:ea:cd:7d:89:a7:d3:f4:bb:3f: 0c:7e:6e:9f -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUDKzfVCYFBSWJ7/OM8mbraypHkIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFCQUFDODYzRkE3N0RBMDg0RkI2RkY2OENDNEQ1MDA4 QzMxNTUyQTAeFw0yNjA1MjAwNTE1MDBaFw0yNzA1MTkwNTIwMDBaMDMxMTAvBgNV BAMTKDU5NjZFQTlFRjRENzRBRERCNEI2QjU2NjM5MDg0RkM3NzY0OTlCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd541sVWWi78e73HN0WUypfQgf 6jUj6tgTrIxT9htLJ2WZcF26nqdADriHm/Cw86ao/tIFcpXiWmfH65EN6r5wxoap lcVJBfiQBNO2M5Cr47+VVTG0XFzcNXvo0U80MdBQjG+7PUN9tVs2l4a0PJEutiBk aO3LqnHtfG5Z/5gNGrn34aFOhCrKARfAlcVRHzsBCTzV/1ptqrNsrd4dcipBPM9e K/EiiAr7GPJVydSuD7/BL2fXFVRseou9+V0GjZHCNPSWzvJhDyKNcVQJm83zJJdH oeDiV7AfQv16Vdw7PXskRlQAht6lQkrqcA5HHMKUi3rNd9vQhEm6G4Dtq2rXAgMB AAGjggK1MIICsTAdBgNVHQ4EFgQUWWbqnvTXSt20trVmOQhPx3ZJm/0wHwYDVR0j BBgwFoAU4bqshj+nfaCE+2/2jMTVAIwxVSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy9BRkFDRkI4QkM3QTQzQkI5NTdEOEU0ODYyMDlDODBCQzkw MTE4REZEM0VENUVCMkNEMzI4MkRGQTE3RUExNjM5LzAvRTFCQUFDODYzRkE3N0RB MDg0RkI2RkY2OENDNEQ1MDA4QzMxNTUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMUJBQUM4NjNGQTc3REEwODRG QjZGRjY4Q0M0RDUwMDhDMzE1NTJBLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRkFDRkI4QkM3QTQzQkI5NTdEOEU0ODYyMDlDODBCQzkwMTE4REZEM0VE NUVCMkNEMzI4MkRGQTE3RUExNjM5LzAvQVMyODU1Ni5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEALu5mgME AL3cPAMEAL3dmTAPBAIAAjAJAwcAKAYCUAAWMA0GCSqGSIb3DQEBCwUAA4IBAQBs OipWHuwV6owj1sRSD2TaBrN/KmtmZuGWfJu0sWcTq0YqwOGiwCwXe95Lkec3dXRj i+yA6d28N/TKlaNQDw6V7+uXZdCfDEARHVvQMl5C6Fj9AUwjODnDfHW/DTqhP3LT gQFzieG/FeSYDHdcENct2U8c7uJH3JOj3rqzk7KQuDzSm6cQxONLY0stsRT2hsDy wb3uv1N4wgRAbLeXxxYooydA24ue7WBgl/YTtnFvGuhgyi5tn8XEucYP4AlWGH+6 h2C2RHG05Xybbe3+lhT+WHBx18Ma9dkNVVB7OV3pmmljGy/+Ip2Zf4enjhYfzzhZ XjDqzX2Jp9P0uz8Mfm6f -----END CERTIFICATE-----Generated at Sat May 23 18:51:48 2026 by rpki-client